Microsoft 365 Running
The Way It Should.
Microsoft 365 is one of the most powerful productivity platforms available — and one of the most misconfigured. Licensing gaps, weak security defaults, unmanaged shared mailboxes, and missing backups are common across San Antonio businesses running M365 without proper administration. AEH handles your entire M365 environment — licensing, users, security, and the applications your team depends on every day.
Every Part of Your
M365 Tenant, Covered
Most businesses only use a fraction of what they're paying for in M365 — and leave the admin side misconfigured. We manage the full environment so you get the most out of your subscription safely.
Licensing & User Administration
The right licenses for the right people — no overpaying for unused seats, no users missing access they need.
- License assignment and optimization
- New user onboarding and offboarding
- Group and distribution list management
- Shared mailbox configuration
- Guest and external access controls
Exchange Online & Email
Your business email is mission critical. We manage the platform so deliverability is clean, security is tight, and your team never loses access.
- Mailbox configuration and management
- Email authentication (SPF, DKIM, DMARC)
- Anti-spam and anti-phishing policies
- Mail flow rules and connectors
- Email archiving and retention policies
- Microsoft 365 mailbox backup — daily automated, point-in-time restore
Microsoft Teams Administration
Teams is your business communication hub — properly configured, with the right policies, it works reliably for a team of any size.
- Teams and channel structure setup
- Meeting and calling policies
- Guest access configuration
- Teams Phone integration (if applicable)
- App and integration permissions
SharePoint & OneDrive
File storage and collaboration done right — organized, accessible to the right people, and not a free-for-all that becomes a compliance and security risk.
- Site structure and permissions management
- External sharing policies
- OneDrive sync configuration for all users
- Document retention and version control
- Migration from network drives or other platforms
Identity & Security (Entra ID)
Microsoft Entra ID (formerly Azure AD) is the identity backbone of your M365 environment. We configure it to be secure by default — not an open door.
- Multi-factor authentication enforcement
- Conditional access policies
- Privileged identity management
- Sign-in risk monitoring and alerts
- Single sign-on (SSO) configuration
Microsoft Defender & Compliance
The security tools built into M365 are powerful — but only if they're turned on and configured correctly. Most tenants leave them at defaults that don't provide real protection.
- Defender for Business configuration
- Safe Links and Safe Attachments policies
- Data loss prevention (DLP) policies
- Microsoft Secure Score improvement
- Compliance center monitoring
Microsoft 365 Does Not Back Up Your Data
This is one of the most common and costly misconceptions we see. Microsoft's responsibility ends at platform availability — they do not back up your emails, files, or Teams data on your behalf. If an employee accidentally deletes a mailbox, a ransomware attack encrypts your SharePoint, or a malicious insider wipes your OneDrive, Microsoft cannot restore it.
M365 data backup requires a third-party solution sitting on top of your tenant. AEH configures, manages, and monitors Microsoft 365 backup as a fully managed add-on to your M365 engagement — covering Exchange Online mailboxes, SharePoint sites, OneDrive files, and Teams data. Automated daily backups, point-in-time restore, and retention policies configured to your needs. Learn more about our backup services →
Default M365 Settings
Are Not Enough
Microsoft's out-of-the-box security defaults are a starting point — not a finished security posture. The average M365 tenant out of the box has a Microsoft Secure Score in the low 30s out of 100. We systematically work through the full Secure Score checklist to close every gap.
MFA Enforced for All Users
No exceptions — including shared accounts and admin roles. We configure and communicate the rollout to your team.
Legacy Authentication Blocked
Older authentication protocols bypass MFA entirely. We disable them across your tenant to close this well-known attack vector.
Admin Accounts Secured
Dedicated admin accounts, no email on admin roles, privileged access workstations where warranted, and break-glass account management.
External Sharing Locked Down
SharePoint and OneDrive external sharing defaults are often too permissive. We set policies appropriate to your business and compliance requirements.
Audit Logging Enabled
Full unified audit logging gives you and us visibility into everything happening across your tenant — who logged in, what they accessed, what changed.
Microsoft Secure Score — Typical Improvement
Which M365 Plan Does
Your Business Actually Need?
Most small businesses are either over-licensed and paying for features they don't use, or under-licensed and missing security features they need. Here's a straightforward breakdown — we help you figure out the right fit.
| Feature | Business Basic | Business Standard | Business Premium Recommended |
|---|---|---|---|
| Exchange Online (email) | ✓ | ✓ | ✓ |
| Teams, SharePoint, OneDrive | ✓ | ✓ | ✓ |
| Desktop Office apps (Word, Excel, etc.) | — | ✓ | ✓ |
| Microsoft Defender for Business | — | — | ✓ |
| Intune device management | — | — | ✓ |
| Azure AD Premium P1 (conditional access) | — | — | ✓ |
| Information protection & DLP | — | — | ✓ |
| Typical monthly cost per user | ~$6 | ~$12.50 | ~$22 |
Pricing shown is approximate Microsoft list pricing as of 2025 and may vary. AEH helps you purchase licenses at the right tier through Microsoft's CSP program.
Moving to M365 or
Starting Fresh?
Whether you're migrating from Google Workspace, a local Exchange server, a different email provider, or setting up M365 for the first time — we handle the full migration with minimal disruption to your team.
Tenant Setup & Configuration
Domain verification, DNS records, security defaults, and foundational configuration done correctly from day one.
User & License Provisioning
Every user created with the right license, group membership, and access — consistently, with documentation.
Email & Data Migration
Mailbox data, calendars, contacts, and files migrated with full history. Cutover coordinated to minimize downtime.
Security Hardening
MFA, conditional access, Defender configuration, and Secure Score improvements applied before the environment goes live.
Team Onboarding
We walk your team through the basics — Outlook, Teams, OneDrive — so they're productive immediately, not frustrated.
Microsoft 365 —
Straight Answers
Complete Your
M365 Environment
M365 works best as part of a fully managed IT environment. Here's what most clients add alongside their M365 management.
Let's See What Your
M365 Tenant Actually Looks Like
A free M365 assessment reviews your current configuration, identifies security gaps and licensing inefficiencies, and gives you a clear picture of where things stand — at no cost.